II. AMENDMENTS TO THE SPECIFICATION 

Please amend the specification as follows: 

Page 1 Lines 1-2 (Title): 

METHOD AND SYSTEMS FOR PROTECTING SUBSCRIBER IDENTIFICATION 
BETWEEN SERVICE AND CONTENT PROVIDERS 

Page 1 Lines 4-9 (Field of Invention): 

The present invention relates generally to the identification protection of a 
subscriber of a distributed network environment, such as the Internet, and more 
specifically to a method and syst e ms for securely and anonymously transferring 
subscriber identification between service and content providers. 

Page 3 Lines 17-19 (Summary of Invention): 

It is another object of the invention to provide a method and syst e ms adapted to 
protect service provider subscriber registries. 

Page 3 Lines 20-22 (Summary of Invention): 

It is a further object of the invention to provide a method and syotomo that do not 
require content providers to build and maintain their own subscriber registries. 

Page 3 Lines 23-26 (Summary of Invention) : 

It is a further object of the invention to provide a method and syst e ms adapted to 
protect user privacy when a user obtains content other than that provided by the user's 
service provider. 
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Page 4 Lines 1-6 (Summary of Invention): 

It is still a further object of the invention to provide a method and syst e ms adapted to 
prevent subscribers from having to enroll with every external content provider, and to 
prevent subscribers from having to provide personal and/or sensitive information to 
content providers that may be considered as not trustworthy. 

Page 4 Lines 7-1 1 (Summary of Invention): 

It is still a further object of the invention to provide a method and syst e ms adapted to 
supply a Web Services based mechanism to allow content providers to validate a 
subscriber's identity prior to downloading content to that subscriber. 

Page 4 Line 12 - Page 5 Line 6 (Summary of Invention): 

The accomplishment of these and other related objects is achieved by a 
computerized method for protecting an identifier of a subscriber during data transfer 
between a service provider and a content provider when said subscriber sends a 

request to said service provider to obtain data belonging to said content provider, Vrb 
said computerized method comprising executing on at least one computer the steps ef 
including : 

- upon reception of said subscriber request by said service provider for each new 
subscriber session : 

- computing dynamically generating for each new session an 
encrypted token using said identifier of said subscribe r, wherein a lifetime 
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of the encrypted token is a user session lifetime, the generating using one 
of a symmetric and asymmetric encryption algorithm comprising: 

determining a separator (S): 

determining a time varying value (T): 

concatenating the subscriber identifier with Tina string such 
that the subscriber identifier and T are separated with S; 

encrypting the string with one of a symmetric and 
asymmetric encryption algorithm : and, 

- transmitting said subscriber request and said encrypted 

token to said content provider; 

- upon reception by said service provider of a Simple Obiect Access Protocol 
(SOAP) certification request comprising an encrypted token, sent by said content 
provider: 

- extracting said encrypted token from said SOAP certification reguest . wherein 
the encrypted token is in one of the SOAP body and a predefined SOAP header : 

- decrypting said extracted encrypted token to d e t e rm i n e th e subscr i b e r i d e nt i f ie r 
using a decryption algorithm corresponding to the encryption algorithm : 

- retrieving the subscriber identifier using the separator; 

- checking said determined subscriber identifier; and, 

- transmitting a success or failure indication to said content provider in a SOAP 
response to said certification request; 
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- upon reception of said data belonging to said content provider by said 
service provider , transmitting said data belonging to said content provider to said 
subscriberL 

memorizing said encrypted token so that it can be reused during the user 
session lifetime without having to be recomputed; and 

formatting said data belonging to said content provider in a format suitable 
and usable by the subscriber . 
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